
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json)
Hash identifier: 9jMCB7q4v4++iu6hFiW/v9hwNm1FKzUKXbW8OAb+PkQ=
Subject key identifier: 0B:DC:3F:40:C8:A3:8B:DD:13:C8:74:60:48:6A:03:4C:3D:38:9C:85
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019E273843A9D5690EB6AC369113A4683217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
Manifest number: 192C
Signing time: Thu 14 May 2026 16:00:59 +0000
Manifest this update: Thu 14 May 2026 16:00:59 +0000
Manifest next update: Fri 15 May 2026 16:00:59 +0000
Files and hashes: 1: FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa (hash: 7YUc6wfgN+sYhdx1cpmGPpDGVuugRkWqHt6/wHp1CDk=)
2: HkwuJu9io020PbxRWDFjsBLDBY0.roa (hash: 54qGpDCHJR33ZIOHfgUlFjHcaUi+BAqkWs7Zaq0wwz8=)
3: I5rk1e-Hzys6bZ34Mf2djbHcYi8.roa (hash: 68VlGtBqjjMcBNNmfnX4SS0mmlFBjW9D5LF+wH6+/Ac=)
4: L-To8dTceN5xxbEJ2QWl3_lVx0Y.roa (hash: VwojFWUhMCERU0Ki7bA5wqTbNgVL6QvW7R1KnsktuYI=)
5: RUdkYB7gYtQia_NavoRTMoG3pvE.roa (hash: T6PW2Xl5c1A8FrzU6sJtHxxL5BTjblBQGY54ZziHyw0=)
6: VQsDH7SGd5hal_nlNR8i5lyIdTU.asa (hash: CUgzrAYaMR8T7BZPdashoUewG1Aed1T1TxeGji8a5Ac=)
7: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: IDnP420CtH+dSZTyOBTrj+Gkkykj4An7EFSSurkTlRQ=)
8: sypz3alt6kD9RUIKSoriU5Cgg9c.roa (hash: Q5XVGAYpXK3W0dy+5n1dt4ArQn0bSHlxksL+5uZfIdA=)
9: tDIPyCeJ6lwABqJN9BvBHe0hGng.roa (hash: Ct8rOWY/RQns6Y0hISopyHYEG2NvtwUoOdKLUr3Niy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:38:43:a9:d5:69:0e:b6:ac:36:91:13:a4:68:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: May 14 16:00:59 2026 GMT
Not After : May 15 16:00:59 2026 GMT
Subject: CN=0bdc3f40c8a38bdd13c87460486a034c3d389c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:42:0c:18:d4:33:bd:38:dc:c9:bc:7f:08:
b5:49:63:2c:8e:0b:dc:1e:4d:a6:7a:42:ab:5b:11:
27:18:ba:a3:e1:0e:63:ca:6c:36:ca:ae:e8:b2:ff:
e3:95:c5:a9:45:9d:90:63:8a:f5:9e:f4:13:1b:71:
71:5d:e2:f3:ce:f0:ef:2c:e7:0f:57:5b:97:1c:6c:
dd:32:7d:d4:cc:d2:6a:dc:6d:0b:94:69:53:7f:44:
d7:e2:d4:a3:a1:7d:03:c8:6c:07:9b:83:0e:99:9f:
97:55:c5:ff:0b:3f:83:15:f4:af:3c:fc:0b:32:5e:
7b:5b:61:8a:56:b2:2d:62:d2:66:89:de:2a:52:60:
8a:c5:ff:da:9e:15:2a:a4:02:1f:31:44:7d:76:7d:
76:da:74:55:b5:7c:2f:82:80:1d:e7:68:92:09:b2:
a7:31:b4:97:40:44:53:fe:bf:ac:7c:71:02:46:a2:
96:12:27:8c:7f:13:e0:ac:0b:f7:62:9b:42:9c:87:
17:82:2d:30:59:e2:a0:51:e3:81:6b:d6:3c:80:fe:
70:c5:77:b1:7e:53:bd:f7:e2:6f:e9:13:a4:ce:a2:
dd:5d:1f:dc:aa:fe:cf:e2:34:e5:16:36:cc:55:4b:
e3:41:69:09:46:90:76:5f:c3:d0:9b:52:61:4a:fa:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:3F:40:C8:A3:8B:DD:13:C8:74:60:48:6A:03:4C:3D:38:9C:85
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:51:8c:5f:00:76:9c:05:99:f2:6b:0e:59:3d:9a:5b:65:31:
7c:80:ea:44:b4:8c:1f:a0:37:38:38:11:67:7a:9d:01:f7:f4:
65:ac:fa:12:8f:48:6f:84:97:96:c4:78:00:a0:e7:f5:67:a5:
24:6f:7f:d7:08:c5:55:82:a7:33:0d:3b:19:9e:78:83:53:28:
83:bb:92:4a:5a:c2:b6:2a:96:89:07:77:7c:0d:3a:3a:c2:48:
64:4b:b3:65:26:14:1a:d0:7a:69:c0:50:85:53:82:b2:30:4c:
76:2e:4e:11:07:6a:1c:88:eb:e6:e7:ea:ef:e2:c7:74:4d:91:
4e:41:bd:ef:04:62:d1:76:70:eb:3e:80:e7:8c:ca:b0:31:46:
53:f7:24:b4:d7:3c:29:b4:d6:1f:38:9c:91:3c:3b:96:0a:3f:
f3:07:78:b4:66:44:9f:d3:fa:57:0b:1b:67:2b:94:3d:3f:95:
2e:64:3d:f4:de:c0:b5:17:d9:6d:ff:e6:cf:57:d7:8f:05:a7:
ce:20:c3:8c:e3:69:ca:67:e1:84:bd:38:f8:83:3b:5f:b3:eb:
62:f4:db:de:d2:f9:35:1c:19:92:43:29:b3:87:a9:68:3c:1a:
cb:0b:b7:ba:d2:cd:84:c2:d8:39:aa:b3:5e:7f:57:87:0f:84:
15:27:d9:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4nOEOp1WkOtqw2kROkaDIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjYwNTE0MTYwMDU5WhcNMjYwNTE1MTYwMDU5WjAzMTEwLwYDVQQD
EygwYmRjM2Y0MGM4YTM4YmRkMTNjODc0NjA0ODZhMDM0YzNkMzg5Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk1CDBjUM7043Mm8fwi1SWMsjgvc
Hk2mekKrWxEnGLqj4Q5jymw2yq7osv/jlcWpRZ2QY4r1nvQTG3FxXeLzzvDvLOcP
V1uXHGzdMn3UzNJq3G0LlGlTf0TX4tSjoX0DyGwHm4MOmZ+XVcX/Cz+DFfSvPPwL
Ml57W2GKVrItYtJmid4qUmCKxf/anhUqpAIfMUR9dn122nRVtXwvgoAd52iSCbKn
MbSXQERT/r+sfHECRqKWEieMfxPgrAv3YptCnIcXgi0wWeKgUeOBa9Y8gP5wxXex
flO99+Jv6ROkzqLdXR/cqv7P4jTlFjbMVUvjQWkJRpB2X8PQm1JhSvow0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvcP0DIo4vdE8h0YEhqA0w9OJyFMB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlGMXwB2
nAWZ8msOWT2aW2UxfIDqRLSMH6A3ODgRZ3qdAff0Zaz6Eo9Ib4SXlsR4AKDn9Wel
JG9/1wjFVYKnMw07GZ54g1Mog7uSSlrCtiqWiQd3fA06OsJIZEuzZSYUGtB6acBQ
hVOCsjBMdi5OEQdqHIjr5ufq7+LHdE2RTkG97wRi0XZw6z6A54zKsDFGU/cktNc8
KbTWHzickTw7lgo/8wd4tGZEn9P6VwsbZyuUPT+VLmQ99N7AtRfZbf/mz1fXjwWn
ziDDjONpymfhhL04+IM7X7PrYvTb3tL5NRwZkkMps4epaDwaywu3utLNhMLYOaqz
Xn9Xhw+EFSfZ7w==
-----END CERTIFICATE-----
Generated at Thu May 14 23:48:09 2026 by rpki-client